Pharma supply chain risk reporting has a data problem, and it starts with a simple discrepancy: the FDA’s official shortage tracker listed 93 ongoing drug shortages as of December 31, 2025, while the American Society of Health-System Pharmacists (ASHP) counted 227 active shortages by the close of Q2 2026, the third consecutive quarterly increase (ASHP Drug Shortages Report; FDA). Two credible trackers, two very different pictures of risk. For a CPO trying to brief the board, that gap is the whole problem: by the time a number lands on a slide, it has already been overtaken by events on the ground.
This isn’t a data-hygiene footnote. It’s the reason so many procurement leadership teams are rethinking how supply chain risk gets reported at all, and it matters most in pharma, where a single supplier disruption can cascade into a drug shortage with patient safety consequences.
The Board Is Working From a Stale Map
Most pharma procurement organizations still brief the board on a quarterly cadence: a risk report is compiled, reviewed, and presented weeks after the underlying data was pulled. In a sector where supplier financial health, regulatory status, and single-source dependencies can shift inside a single quarter, that lag means the board is making capital and contingency decisions based on a map that no longer matches the territory.
The concentration data makes the stakes concrete. According to ASHP, just under half (48%) of all new drug shortages in 2026 involve sole-source, single-manufacturer products (ASHP). Separately, the United States Pharmacopeia (USP) found that nearly half of drugs currently in shortage have at least one key starting material sourced from a single country, what USP calls a “potential point of failure” that can cascade through the entire downstream supply chain simultaneously (USP; FiercePharma). A quarterly report built on last month’s snapshot cannot show a board where that concentration is building before it becomes a headline.
Tier-1 Visibility Isn’t the Same as Risk Visibility
Boards often assume tier-1 supplier scorecards are sufficient because tier-1 relationships are the ones procurement teams know best. But the USP findings above point upstream, to key starting materials and active pharmaceutical ingredient (API) production that sit two or three tiers back from the finished-dose manufacturer a pharma company contracts with directly. A tier-1 supplier can look financially and operationally sound while the tier-2 or tier-3 supplier behind it is the actual point of failure.
Traffic-light scorecards tell a board a supplier is “red.” They rarely tell the board how many dollars of working capital are exposed, or what to do next. That’s the quotable version of the gap: detection without dollar-quantified exposure and without a next step isn’t board-ready risk management, it’s a compliance exercise.
What Proactive Procurement Reporting Actually Looks Like
Gartner has predicted that by 2031, 60% of supply chain disruptions will be resolved without human intervention as AI-driven monitoring matures (Gartner). Getting there starts with closing the reporting lag today, not waiting for full automation.
Chain Verity (chainverity.ai) was built around that gap. Rather than compiling a static quarterly snapshot, it continuously monitors 200+ financial and operational signals per supplier across tier 1, 2, and 3, and quantifies exposure in actual working-capital dollars instead of a red-yellow-green label. That gives a pharma CPO a board deck built on current data, not data that was accurate six weeks ago.
More importantly, it doesn’t stop at flagging that a KSM supplier looks distressed. It tells procurement teams which suppliers to start diversifying away from and on what timeline, when to trigger a dual-sourcing or contingency plan before a shortage hits, and which specific contract clauses to revisit given where the live risk is concentrating: exclusivity terms, minimum volume commitments, pricing indexation, audit and reporting rights, and termination or step-in triggers. For a pharma procurement team facing a renewal on a single-source API contract, that’s the difference between renegotiating from a position of foresight and renegotiating from a position of crisis. Companies exploring this approach can review early access through Chain Verity’s design partner program.
Frequently Asked Questions
Q: How should CPOs report pharma supply chain risk to the board?
A: Boards need current, dollar-quantified exposure data rather than quarterly snapshots. That means reporting working capital at risk by supplier tier, flagging concentration points like single-source key starting materials, and pairing each flagged risk with a specific recommended action, such as a diversification timeline or a contract clause to renegotiate, rather than a static red-yellow-green score.
Q: Why is quarterly supply chain risk reporting a problem in pharma specifically?
A: Pharma supply chains involve long, multi-tier dependencies on active pharmaceutical ingredients and key starting materials that can shift quickly due to export restrictions, regulatory action, or a single facility going offline. A report compiled weeks earlier can miss a deterioration that a live monitoring system would have caught in real time.
Q: What is sub-tier supplier visibility and why does it matter for pharma procurement?
A: Sub-tier supplier visibility means tracking financial and operational health at the tier-2 and tier-3 level, not just the tier-1 manufacturer a pharma company contracts with directly. USP data shows nearly half of drugs in shortage trace back to a key starting material sourced from a single country, a risk that tier-1-only monitoring would never surface.
Q: How does real-time monitoring change contract renewal decisions?
A: Instead of renewing a supplier contract on a fixed schedule regardless of current risk, procurement teams using live data can time renegotiation around actual exposure, revisiting exclusivity clauses, volume commitments, or termination triggers before a contract locks in for another cycle.
